PT-2007-6692 · Jeebles · Jeebles Directory

Published 2007-10-29 · Updated 2017-07-29 · CVE-2007-5705

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Jeebles Directory version 2.9.60

Description The issue concerns an unspecified vulnerability in the Settings component of the administration system. It allows remote authenticated administrators to execute arbitrary PHP code. The vulnerability is related to the settings.inc.php file.

Recommendations For Jeebles Directory version 2.9.60, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-5705

Affected Products

Jeebles Directory

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-5705 · Security Note
• http://secunia.com/advisories/27345 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37379 · Note